How to check Minifilter support?

NTFSD
1

Hi All,

I want to check minifilter support is available or not on current OS. I have checked it with VerifyVersionInfo() API. But for 2K the requirement is SP4 with Update rollup pack. Using VerifyVersionInfo() API I am abled just to check 2K SP4, But how to check update rollup pack.

Is there any other way to determine minifilter support?

Thanks & Regards,
Amit.

2

I do it by checking if the “fltmgr” service is installed.
You can also check the presence of “fltlib.dll” by LoadLibrary.

I believe this is more reliable than version checking,
because there might be a scenario where someone uninstalled
or disabled filter manager support from his OS (I doubt
someone will do that but still)

L.

3

> Is there any other way to determine minifilter support?
Quick and dirty - just checking for …\system32\DRIVERS\fltMgr.sys.

You can also check for presense of \FileSystem\Filters\FltMgrMsg and \FileSystem\Filters\FltMgr in kernel namespace.

devicetree and/or devview are your friends.

-------------- Original message --------------
From: xxxxx@yahoo.com

Hi All,

I want to check minifilter support is available or not on current OS. I have
checked it with VerifyVersionInfo() API. But for 2K the requirement is SP4 with
Update rollup pack. Using VerifyVersionInfo() API I am abled just to check 2K
SP4, But how to check update rollup pack.

Is there any other way to determine minifilter support?

Thanks & Regards,
Amit.

NTFSD is sponsored by OSR

For our schedule debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars

You are currently subscribed to ntfsd as: xxxxx@comcast.net
To unsubscribe send a blank email to xxxxx@lists.osr.com